Пошук по сайту

Добрый день! Интересует совместная работа freeradius и mx-80. Набросал конфиг Джунипера для PPPoE. Они между собой вроде как общаются, сессия абонента поднимается но тут же отваливается. Может кто то работает по такой схеме, что то подскажет...? Пока не могу найти причину...

Juniper MX80 не получатся реализовать схему Http-redirect для пользователей заблокированных по балансу. Для подключения пользователей с положительным балансом используем фильтры: set firewall family inet filter fltr-100Mb-NAT interface-specific set firewall family inet filter fltr-100Mb-NAT term 1 from source-prefix-list NAT-PREFIX-LIST set firewall family inet filter fltr-100Mb-NAT term 1 then service-accounting set firewall family inet filter fltr-100Mb-NAT term 1 then routing-instance NAT-RI set firewall family inet filter fltr-100Mb-NAT term 2 then service-accounting set firewall family inet filter fltr-50Mb-NAT interface-specific set firewall family inet filter fltr-50Mb-NAT term 1 from source-prefix-list NAT-PREFIX-LIST set firewall family inet filter fltr-50Mb-NAT term 1 then policer plcr-100Mb set firewall family inet filter fltr-50Mb-NAT term 1 then service-accounting set firewall family inet filter fltr-50Mb-NAT term 2 then policer plcr-100Mb set firewall family inet filter fltr-50Mb-NAT term 2 then service-accounting set firewall policer plcr-100Mb logical-interface-policer set firewall policer plcr-100Mb if-exceeding bandwidth-limit 1g set firewall policer plcr-100Mb if-exceeding burst-size-limit 38400000 set firewall policer plcr-100Mb then discard Для заблокированных по балансу пытались сделать через фильтр такого плана: set firewall family inet filter fltr-http-redirect term 1 from source-prefix-list NAT-PREFIX-LIST set firewall family inet filter fltr-http-redirect term 1 from protocol icmp set firewall family inet filter fltr-http-redirect term 1 from port bootpc set firewall family inet filter fltr-http-redirect term 1 from port dhcp set firewall family inet filter fltr-http-redirect term 1 from port domain set firewall family inet filter fltr-http-redirect term 1 from port netbios-ns set firewall family inet filter fltr-http-redirect term 1 then policer plcr-8Mb set firewall family inet filter fltr-http-redirect term 1 then count service_accept set firewall family inet filter fltr-http-redirect term 1 then accept set firewall family inet filter fltr-http-redirect term 2 from port http set firewall family inet filter fltr-http-redirect term 2 then policer plcr-8Mb set firewall family inet filter fltr-http-redirect term 2 then count redirected set firewall family inet filter fltr-http-redirect term 2 then routing-instance http-redirect set firewall family inet filter fltr-http-redirect term 3 then count else_discard set firewall policer plcr-8Mb logical-interface-policer set firewall policer plcr-8Mb if-exceeding bandwidth-limit 8m set firewall policer plcr-8Mb if-exceeding burst-size-limit 1920000 set firewall policer plcr-8Mb then discard set routing-instances http-redirect instance-type forwarding set routing-instances http-redirect routing-options static route 0.0.0.0/0 next-hop xxx.xxx.xxx.xxx Но данная схема не заработала.

Продам железку. БУ, дата производства 201207хх, точнее не помню. Несколько царапин на крышке, у одной заглушки нет уха, на работу не влияет. Залита последняя прошивка с сайта, перед передачей скину в дефолт разумеется. show chassis hardware Hardware inventory: Item Version Part number Serial number Description Chassis T3641 MX80 Midplane REV 08 711-031594 ABBV3779 MX80 PEM 0 Rev 04 740-028288 VL13046 AC Power Entry Module PEM 1 Rev 04 740-028288 VL13354 AC Power Entry Module Routing Engine BUILTIN BUILTIN Routing Engine TFEB 0 BUILTIN BUILTIN Forwarding Engine Processor QXM 0 REV 05 711-028408 ABBW2407 MPC QXM FPC 0 BUILTIN BUILTIN MPC BUILTIN MIC 0 BUILTIN BUILTIN 4x 10GE XFP PIC 0 BUILTIN BUILTIN 4x 10GE XFP Xcvr 0 NON-JNPR CSXSRD90078 XFP-10G-SR Xcvr 1 REV 03 740-014289 CB13BQ0ZL XFP-10G-SR Xcvr 2 REV 03 740-014289 CB13BQ18B XFP-10G-SR Xcvr 3 REV 03 740-014289 CB22BQ0HQ XFP-10G-SR FPC 1 BUILTIN BUILTIN MPC BUILTIN Fan Tray Fan Tray show system license License usage: Licenses Licenses Licenses Expiry Feature name used installed needed scale-subscriber 0 1000 0 permanent scale-l2tp 0 1000 0 permanent scale-mobile-ip 0 1000 0 permanent Licenses installed: none show version Hostname: mx80. Model: mx80 Junos: 13.3R1.6 JUNOS Base OS boot [13.3R1.6] JUNOS Base OS Software Suite [13.3R1.6] JUNOS Kernel Software Suite [13.3R1.6] JUNOS Crypto Software Suite [13.3R1.6] JUNOS Packet Forwarding Engine Support (MX80) [13.3R1.6] JUNOS Online Documentation [13.3R1.6] JUNOS Services Application Level Gateways [13.3R1.6] JUNOS Services Jflow Container package [13.3R1.6] JUNOS Services Stateful Firewall [13.3R1.6] JUNOS Services NAT [13.3R1.6] JUNOS Services RPM [13.3R1.6] JUNOS Services Crypto [13.3R1.6] JUNOS Services SSL [13.3R1.6] JUNOS Services IPSec [13.3R1.6] JUNOS Routing Software Suite [13.3R1.6] Фото будут позже, как заберу из ДЦ. Цена 18000$. В подарок дам 4 модуля XFP-10GE-S.